Deskripsi CVE

The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.
CWE-189	Category : Numeric Errors Weaknesses in this category are related to improper calculation or conversion of numbers.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	7.5		AV:N/AC:L/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Live555>>Streaming_media >> Version 2011-08-13

Live555>>Streaming_media >> Version 2011-08-20

Live555>>Streaming_media >> Version 2011-08-22

Live555>>Streaming_media >> Version 2011-09-02

Live555>>Streaming_media >> Version 2011-09-19

Live555>>Streaming_media >> Version 2011-10-05

Live555>>Streaming_media >> Version 2011-10-09

Live555>>Streaming_media >> Version 2011-10-18

Live555>>Streaming_media >> Version 2011-10-27

Live555>>Streaming_media >> Version 2011-11-02

Live555>>Streaming_media >> Version 2011-11-08

Live555>>Streaming_media >> Version 2011-11-20

Live555>>Streaming_media >> Version 2011-11-27

Live555>>Streaming_media >> Version 2011-11-28

Live555>>Streaming_media >> Version 2011-11-29

Live555>>Streaming_media >> Version 2011-12-02

Live555>>Streaming_media >> Version 2011-12-19

Live555>>Streaming_media >> Version 2011-12-20

Live555>>Streaming_media >> Version 2011-12-23

Live555>>Streaming_media >> Version 2012-01-07

Live555>>Streaming_media >> Version 2012-01-13

Live555>>Streaming_media >> Version 2012-01-25

Live555>>Streaming_media >> Version 2012-01-26

Live555>>Streaming_media >> Version 2012-02-03

Live555>>Streaming_media >> Version 2012-02-04

Live555>>Streaming_media >> Version 2012-02-29

Live555>>Streaming_media >> Version 2012-03-20

Live555>>Streaming_media >> Version 2012-03-22

Live555>>Streaming_media >> Version 2012-04-04

Live555>>Streaming_media >> Version 2012-04-18

Live555>>Streaming_media >> Version 2012-04-21

Live555>>Streaming_media >> Version 2012-04-26

Live555>>Streaming_media >> Version 2012-04-27

Live555>>Streaming_media >> Version 2012-05-03

Live555>>Streaming_media >> Version 2012-05-11

Live555>>Streaming_media >> Version 2012-05-17

Live555>>Streaming_media >> Version 2012-06-12

Live555>>Streaming_media >> Version 2012-06-17

Live555>>Streaming_media >> Version 2012-06-23

Live555>>Streaming_media >> Version 2012-06-26

Live555>>Streaming_media >> Version 2012-07-03

Live555>>Streaming_media >> Version 2012-07-06

Live555>>Streaming_media >> Version 2012-07-14

Live555>>Streaming_media >> Version 2012-07-18

Live555>>Streaming_media >> Version 2012-07-24

Live555>>Streaming_media >> Version 2012-07-26

Live555>>Streaming_media >> Version 2012-08-08

Live555>>Streaming_media >> Version 2012-08-12

Live555>>Streaming_media >> Version 2012-08-17

Live555>>Streaming_media >> Version 2012-08-20

Live555>>Streaming_media >> Version 2012-08-28

Live555>>Streaming_media >> Version 2012-08-29

Live555>>Streaming_media >> Version 2012-08-30

Live555>>Streaming_media >> Version 2012-08-31

Live555>>Streaming_media >> Version 2012-09-06

Live555>>Streaming_media >> Version 2012-09-07

Live555>>Streaming_media >> Version 2012-09-11

Live555>>Streaming_media >> Version 2012-09-12

Live555>>Streaming_media >> Version 2012-09-13

Live555>>Streaming_media >> Version 2012-09-27

Live555>>Streaming_media >> Version 2012-10-01

Live555>>Streaming_media >> Version 2012-10-04

Live555>>Streaming_media >> Version 2012-10-11

Live555>>Streaming_media >> Version 2012-10-12

Live555>>Streaming_media >> Version 2012-10-16

Live555>>Streaming_media >> Version 2012-10-17

Live555>>Streaming_media >> Version 2012-10-18

Live555>>Streaming_media >> Version 2012-10-21

Live555>>Streaming_media >> Version 2012-10-22

Live555>>Streaming_media >> Version 2012-10-24

Live555>>Streaming_media >> Version 2012-11-05

Live555>>Streaming_media >> Version 2012-11-08

Live555>>Streaming_media >> Version 2012-11-16

Live555>>Streaming_media >> Version 2012-11-17

Live555>>Streaming_media >> Version 2012-11-22

Live555>>Streaming_media >> Version 2012-11-28

Live555>>Streaming_media >> Version 2012-11-29

Live555>>Streaming_media >> Version 2012-11-30

Live555>>Streaming_media >> Version 2012-12-15

Live555>>Streaming_media >> Version 2012-12-18

Live555>>Streaming_media >> Version 2012-12-21

Live555>>Streaming_media >> Version 2012-12-22

Live555>>Streaming_media >> Version 2012-12-23

Live555>>Streaming_media >> Version 2012-12-24

Live555>>Streaming_media >> Version 2013-01-03

Live555>>Streaming_media >> Version 2013-01-04

Live555>>Streaming_media >> Version 2013-01-05

Live555>>Streaming_media >> Version 2013-01-15

Live555>>Streaming_media >> Version 2013-01-18

Live555>>Streaming_media >> Version 2013-01-19

Live555>>Streaming_media >> Version 2013-01-21

Live555>>Streaming_media >> Version 2013-01-22

Live555>>Streaming_media >> Version 2013-01-23

Live555>>Streaming_media >> Version 2013-01-25

Live555>>Streaming_media >> Version 2013-02-05

Live555>>Streaming_media >> Version 2013-02-11

Live555>>Streaming_media >> Version 2013-02-27

Live555>>Streaming_media >> Version 2013-03-07

Live555>>Streaming_media >> Version 2013-03-23

Live555>>Streaming_media >> Version 2013-03-31

Live555>>Streaming_media >> Version 2013-04-01

Live555>>Streaming_media >> Version 2013-04-04

Live555>>Streaming_media >> Version 2013-04-05

Live555>>Streaming_media >> Version 2013-04-06

Live555>>Streaming_media >> Version 2013-04-08

Live555>>Streaming_media >> Version 2013-04-16

Live555>>Streaming_media >> Version 2013-04-21

Live555>>Streaming_media >> Version 2013-04-22

Live555>>Streaming_media >> Version 2013-04-23

Live555>>Streaming_media >> Version 2013-04-29

Live555>>Streaming_media >> Version 2013-04-30

Live555>>Streaming_media >> Version 2013-05-30

Live555>>Streaming_media >> Version 2013-06-06

Live555>>Streaming_media >> Version 2013-06-14

Live555>>Streaming_media >> Version 2013-06-18

Live555>>Streaming_media >> Version 2013-06-30

Live555>>Streaming_media >> Version 2013-07-03

Live555>>Streaming_media >> Version 2013-07-16

Live555>>Streaming_media >> Version 2013-07-30

Live555>>Streaming_media >> Version 2013-07-31

Live555>>Streaming_media >> Version 2013-08-05

Live555>>Streaming_media >> Version 2013-08-15

Live555>>Streaming_media >> Version 2013-08-16

Live555>>Streaming_media >> Version 2013-08-28

Live555>>Streaming_media >> Version 2013-08-31

Live555>>Streaming_media >> Version 2013-09-07

Live555>>Streaming_media >> Version 2013-09-08

Live555>>Streaming_media >> Version 2013-09-11

Live555>>Streaming_media >> Version 2013-09-18

Live555>>Streaming_media >> Version 2013-09-27

Live555>>Streaming_media >> Version 2013-09-30

Live555>>Streaming_media >> Version 2013-10-01

Live555>>Streaming_media >> Version 2013-10-02

Live555>>Streaming_media >> Version 2013-10-03

Live555>>Streaming_media >> Version 2013-10-07

Live555>>Streaming_media >> Version 2013-10-08

Live555>>Streaming_media >> Version 2013-10-09

Live555>>Streaming_media >> Version 2013-10-11

Live555>>Streaming_media >> Version 2013-10-16

Live555>>Streaming_media >> Version 2013-10-18

Live555>>Streaming_media >> Version 2013-10-22

Live555>>Streaming_media >> Version 2013-10-24

Live555>>Streaming_media >> Version 2013-10-25

Live555>>Streaming_media >> Version 2013-11-06

Live555>>Streaming_media >> Version 2013-11-10

Live555>>Streaming_media >> Version 2013-11-14

Live555>>Streaming_media >> Version 2013-11-15

Live555>>Streaming_media >> Version 2013-11-25

Referensi

http://www.live555.com/liveMedia/public/changelog.txt
Tags : x_refsource_CONFIRM

http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html
Tags : x_refsource_MISC

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	33.97%	–	–
2022-04-03	–	–	33.97%	–	–
2023-03-12	–	–	–	91.33%	–
2023-09-10	–	–	–	91.33%	–
2023-10-22	–	–	–	89.64%	–
2023-12-24	–	–	–	89.64%	–
2024-06-02	–	–	–	89.64%	–
2025-01-19	–	–	–	89.64%	–
2025-03-18	–	–	–	–	3.36%
2025-03-30	–	–	–	–	3.36%
2025-04-15	–	–	–	–	3.36%
2025-11-18	–	–	–	–	3.36%
2025-11-21	–	–	–	–	3.36%
2026-05-31	–	–	–	–	3.36%

Tanggal	Persentil
2022-02-06	97%
2022-04-03	98%
2023-03-12	98%
2023-09-10	99%
2023-10-22	98%
2023-12-24	99%
2024-06-02	99%
2025-01-19	99%
2025-03-18	87%
2025-03-30	86%
2025-04-15	87%
2025-11-18	86%
2025-11-21	87%
2026-05-31	88%

CVE-2013-6933 : Detail

CVE-2013-6933